SYSTEM privileges are specific to the database as a whole, e.g. CREATE
SESSION or SELECT ANY TABLE.
OBJECT privileges are specific to a particular object, e.g. SELECT ON
MY_TABLE
OBJECT privileges can be granted with GRANT OPTION, which allows the grantee
to grant the same privilege to other users.
SYSTEM privileges can be granted with ADMIN OPTION, which allows them to be
granted to other users.
If you revoke an OBJECT privilege from a user, it is also revoked from all
the users that user has granted it to.
If you revoke a SYSTEM privilege from a user, it has no impact on grants
that user has made.
OBJECT privileges are seen in DBA_TAB_PRIVS, SYSTEM privileges are in
DBA_SYS_PRIVS.
I hope this helps.
Andrew
www.Phaldor-IT.com
"Peter" <peter (AT) nomorenewsspammin (DOT) ca> wrote
Quote:
How do you distinguish between an admin privilege and an object
privilege?
Thanks |